This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft File: WBE1OPP_XM76JqEG222MbLwCoZ8.mft (raw, json) Hash identifier: OkQ8Mua5E+ytfy84pmBbyWAVCS34740MBpBOSsUzt40= Subject key identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 Authority key identifier: 58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F Certificate issuer: /CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Certificate serial: 0A92 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft Manifest number: 0A92 Signing time: Sun 21 Dec 2025 06:40:42 +0000 Manifest this update: Sun 21 Dec 2025 06:40:42 +0000 Manifest next update: Sun 21 Dec 2025 12:40:42 +0000 Files and hashes: 1: WBE1OPP_XM76JqEG222MbLwCoZ8.crl (hash: WokX2v4Yq/Dm8bsF+eBXypSnBoDZFR0scStPctKZBEA=) Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/1xHsDTeBWKRHb-bqfXClSpUZWhE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1xHsDTeBWKRHb-bqfXClSpUZWhE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 10:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2706 (0xa92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58113538F3FF5CCEFA26A106DB6D8C6CBC02A19F Validity Not Before: Dec 21 06:40:42 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=22397420AA3CFFCFBCE8B2FD94D32408B1688B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:d9:3e:3e:32:2a:ec:41:f4:fc:57:14:a9: 88:cc:43:6a:cd:85:32:04:bd:91:0d:88:7a:fc:79: 3f:50:4c:68:e9:49:ea:36:50:53:5a:ee:96:31:ee: 6e:3a:ac:2c:e2:98:7c:11:16:1e:bc:b5:b3:82:38: b3:04:99:4b:b7:a5:8f:3c:bc:d2:c9:43:53:62:1b: 89:d1:ff:5f:0f:65:5d:35:fc:88:d7:86:d4:41:08: ec:f0:4f:06:d6:f4:1c:bf:51:4a:e9:08:66:50:c7: bd:2d:c3:50:44:de:3b:9d:fd:33:00:ec:7f:42:2e: ec:a1:00:d3:ec:43:d6:2c:8a:90:10:62:87:77:cf: 6b:b6:56:77:7f:76:11:f7:25:72:d5:70:d7:32:bc: c9:35:e5:30:94:38:c1:2b:63:a4:56:eb:14:89:03: 88:d5:d7:1a:ef:cc:ab:97:8c:95:7b:06:ff:1a:ba: d5:46:48:f9:50:98:33:db:cd:eb:76:e0:7f:9c:e3: dd:4c:1b:18:32:cb:21:0d:f3:03:09:97:ef:31:f0: 6c:10:3b:46:73:7f:c5:1c:54:9c:97:d0:36:f3:99: 89:60:98:c5:ed:a5:61:56:d3:ce:dd:38:f2:6f:56: 20:5a:6b:95:7a:9b:fd:86:4f:81:a4:27:33:40:13: bf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:39:74:20:AA:3C:FF:CF:BC:E8:B2:FD:94:D3:24:08:B1:68:8B:06 X509v3 Authority Key Identifier: keyid:58:11:35:38:F3:FF:5C:CE:FA:26:A1:06:DB:6D:8C:6C:BC:02:A1:9F X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/WBE1OPP_XM76JqEG222MbLwCoZ8.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3295/WBE1OPP_XM76JqEG222MbLwCoZ8.mft RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4b:16:7b:19:bd:f9:06:78:c8:11:69:92:5c:d3:6d:8f:42: f9:79:67:17:60:28:21:8b:f4:06:47:4c:0e:80:fa:33:fd:b9: f3:41:ab:a0:68:4b:44:89:2c:ea:5e:96:08:7f:8d:f3:52:f3: 0a:48:6b:51:8f:88:e3:56:dc:97:f6:71:3a:c1:13:63:fe:b3: 66:ab:5a:99:50:58:c2:46:0b:91:93:0c:06:ab:00:ca:91:ac: b7:11:5a:5a:4c:c4:82:f1:16:c7:39:54:d0:eb:4e:3e:2c:9e: ad:b6:58:56:ef:e7:f3:49:dc:c4:f8:34:a3:ba:c6:b0:3e:46: 2d:c2:0e:ac:4f:4e:09:6f:64:4a:9d:bc:d2:67:be:61:80:7a: 59:44:63:51:81:d0:cf:3e:a6:25:08:12:fe:d7:fd:a1:8f:fd: df:27:1f:fa:db:b2:e1:22:e6:51:3b:19:e0:d5:e1:b4:36:5d: 67:b7:3c:e7:77:86:83:37:29:46:1a:0e:01:e9:c8:fc:d0:ad: c7:ce:1a:ac:2d:10:c5:9e:60:de:c9:dc:40:93:a9:f5:32:d0: 9f:4d:70:a3:00:08:4a:44:b6:10:00:91:1d:dd:f1:86:37:50: 9c:56:10:7e:62:86:0b:cc:3d:7c:d8:b7:81:83:43:3f:00:f9: fa:2d:94:2a -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgICCpIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTgx MTM1MzhGM0ZGNUNDRUZBMjZBMTA2REI2RDhDNkNCQzAyQTE5RjAeFw0yNTEyMjEw NjQwNDJaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDIyMzk3NDIwQUEzQ0ZG Q0ZCQ0U4QjJGRDk0RDMyNDA4QjE2ODhCMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCiP9k+PjIq7EH0/FcUqYjMQ2rNhTIEvZENiHr8eT9QTGjpSeo2 UFNa7pYx7m46rCzimHwRFh68tbOCOLMEmUu3pY88vNLJQ1NiG4nR/18PZV01/IjX htRBCOzwTwbW9By/UUrpCGZQx70tw1BE3jud/TMA7H9CLuyhANPsQ9YsipAQYod3 z2u2Vnd/dhH3JXLVcNcyvMk15TCUOMErY6RW6xSJA4jV1xrvzKuXjJV7Bv8autVG SPlQmDPbzet24H+c491MGxgyyyEN8wMJl+8x8GwQO0Zzf8UcVJyX0DbzmYlgmMXt pWFW087dOPJvViBaa5V6m/2GT4GkJzNAE7+BAgMBAAGjggIMMIICCDAdBgNVHQ4E FgQUIjl0IKo8/8+86LL9lNMkCLFoiwYwHwYDVR0jBBgwFoAUWBE1OPP/XM76JqEG 222MbLwCoZ8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzI5 NS9XQkUxT1BQX1hNNzZKcUVHMjIyTWJMd0NvWjguY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL1dCRTFPUFBfWE03NkpxRUcyMjJNYkx3Q29aOC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMyOTUvV0JFMU9QUF9YTTc2 SnFFRzIyMk1iTHdDb1o4Lm1mdDAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUAMCEG CCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQELBQAD ggEBAF5LFnsZvfkGeMgRaZJc022PQvl5ZxdgKCGL9AZHTA6A+jP9ufNBq6BoS0SJ LOpelgh/jfNS8wpIa1GPiONW3Jf2cTrBE2P+s2arWplQWMJGC5GTDAarAMqRrLcR WlpMxILxFsc5VNDrTj4snq22WFbv5/NJ3MT4NKO6xrA+Ri3CDqxPTglvZEqdvNJn vmGAellEY1GB0M8+piUIEv7X/aGP/d8nH/rbsuEi5lE7GeDV4bQ2XWe3POd3hoM3 KUYaDgHpyPzQrcfOGqwtEMWeYN7J3ECTqfUy0J9NcKMACEpEthAAkR3d8YY3UJxW EH5ihgvMPXzYt4GDQz8A+fotlCo= -----END CERTIFICATE-----Generated at Sun Dec 21 09:57:59 2025 by rpki-client